Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a5ac3e-a035-3256-8441-4005797e0f5c.roa
File:                     55a5ac3e-a035-3256-8441-4005797e0f5c.roa (raw, json)
Hash identifier:          CJWvMo7WQMBGcelVDhL9cZ8IBDv32rZBtBsYSfKh5zY=
Subject key identifier:   A7:A3:EC:AF:6D:0A:14:D1:0D:50:C7:E5:45:CA:2D:12:52:24:28:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4D730BE4B4C57926C6A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a5ac3e-a035-3256-8441-4005797e0f5c.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     396551
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d7:30:be:4b:4c:57:92:6c:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=152ea616-fb59-43a0-9461-0a2fa115186c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:c6:b7:b4:d9:a9:9f:e7:dc:85:1c:b2:0e:
                    5c:20:d4:9a:be:fb:ca:53:23:97:a3:aa:0a:c1:e2:
                    a0:47:86:47:ad:f5:77:0c:7a:0c:f6:31:7f:27:38:
                    eb:21:80:17:20:a2:8d:53:0d:a1:c4:5e:35:ad:72:
                    ab:7e:c7:19:b0:ce:1e:1d:e1:e5:c1:eb:76:db:38:
                    61:cb:82:1a:11:5f:d8:d7:b8:b3:0d:39:6e:df:ab:
                    e8:7b:35:ab:44:b1:47:5a:4f:1d:41:b9:90:a2:df:
                    7c:b1:63:fe:73:c6:c8:61:8c:9f:5d:1a:8c:50:01:
                    16:9c:a0:55:16:84:b2:62:56:c5:78:87:da:c1:c1:
                    40:5f:63:46:75:fd:76:e7:65:38:93:97:d2:9a:1d:
                    8c:c6:70:f8:8d:b4:c3:bc:aa:5a:0b:03:02:cb:4d:
                    11:ff:ae:75:dd:06:08:8b:25:39:de:41:6f:5b:53:
                    d8:c5:f5:64:e8:e7:9c:6c:ae:ae:e3:c4:59:8f:26:
                    67:5c:20:f5:99:ad:b3:a2:71:35:a7:4e:71:88:8e:
                    94:26:d8:83:9b:3e:6d:7d:71:3b:08:d0:4e:f5:53:
                    d1:f3:f4:94:fa:6c:70:ec:a1:48:30:bf:27:19:6d:
                    a1:33:19:79:30:d9:cf:16:4a:84:44:54:57:ad:88:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:EC:AF:6D:0A:14:D1:0D:50:C7:E5:45:CA:2D:12:52:24:28:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a5ac3e-a035-3256-8441-4005797e0f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:5e:2d:82:aa:cc:8f:82:c3:1c:c6:c5:c9:ed:74:5d:8c:
         73:78:bb:89:4b:e7:cf:2c:4e:65:b9:b6:79:0f:f9:b3:35:4f:
         b3:fe:37:f1:59:eb:f2:1e:50:3d:af:90:e0:7a:3f:64:cb:e0:
         59:a0:6a:b5:95:41:b1:bc:5a:91:2a:4d:a2:1b:39:4d:e2:da:
         9e:72:fd:11:76:5c:51:52:1b:17:f3:61:37:4c:1f:23:9d:0c:
         e5:55:2d:14:50:3d:c1:25:d6:14:d5:38:f4:93:f8:e2:13:e6:
         b4:90:9e:e1:a8:e8:c0:d2:f4:28:42:a6:77:64:98:6d:0d:ba:
         73:1d:99:11:eb:09:ba:d2:cd:3a:47:ac:2a:01:86:24:27:b3:
         1c:ec:e7:52:52:81:88:3a:e2:ad:f3:e5:f5:e6:c2:4e:7e:66:
         cc:30:7f:e0:1f:ee:4e:86:f5:49:b2:6c:5e:8c:4f:f3:10:96:
         d4:62:fb:53:8e:43:68:a1:f4:49:cc:e6:d5:7b:67:87:04:50:
         e3:cf:84:7e:a9:3a:86:3f:93:5c:57:4e:50:d7:a8:00:80:9e:
         01:2b:af:a1:c6:eb:66:74:4b:91:da:36:25:33:4b:52:c3:f8:
         d1:64:21:bf:a6:f4:af:b8:a8:4d:c8:07:eb:b2:ed:4d:22:7d:
         35:66:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:26:59 2026 by rpki-client